#transcript #protocols #traits #secure #hash #definition #format

no-std flexible-transcript-mirror

A simple transcript trait definition, along with viable options. Mirrored by sneurlax from serai for downstream crate-publishing purposes until serai publishes their crates; use the versions from serai in production. This crate will be unpublished/deleted as soon as possible.

2 releases

0.3.2 Sep 22, 2024
0.3.1 Sep 13, 2024

#1570 in Cryptography

Download history 131/week @ 2024-09-09 235/week @ 2024-09-16 53/week @ 2024-09-23 34/week @ 2024-09-30 1/week @ 2024-10-07 24/week @ 2024-10-14 16/week @ 2024-10-21 13/week @ 2024-10-28 21/week @ 2024-11-04

74 downloads per month
Used in 10 crates (7 directly)

MIT license

18KB
232 lines

Flexible Transcript

Flexible Transcript is a crate offering:

  • Transcript, a trait offering functions transcripts should implement.
  • DigestTranscript, a competent transcript format instantiated against a provided hash function.
  • MerlinTranscript, a wrapper of merlin into the trait (available via the merlin feature).
  • RecommendedTranscript, a transcript recommended for usage in applications. Currently, this is DigestTranscript<Blake2b512> (available via the recommended feature).

The trait was created while working on an IETF draft which defined an incredibly simple transcript format. Extensions of the protocol would quickly require a more competent format, yet implementing the one specified was mandatory to meet the specification. Accordingly, the library implementing the draft defined an IetfTranscript, dropping labels and not allowing successive challenges, yet thanks to the trait, allowed protocols building on top to provide their own transcript format as needed.

DigestTranscript takes in any hash function implementing Digest, offering a secure transcript format around it. All items are prefixed by a flag, denoting their type, and their length.

MerlinTranscript was used to justify the API, and if any issues existed with DigestTranscript, enable a fallback. It was also meant as a way to be compatible with existing Rust projects using merlin.

This library was audited by Cypher Stack in March 2023, culminating in commit 669d2dbffc1dafb82a09d9419ea182667115df06. Any subsequent changes have not undergone auditing.

This library is usable under no_std.

Dependencies

~355–710KB
~15K SLoC